$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa File: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json) Hash identifier: +9y8ic4PiXaKoNlsv54wawj8Wj1LaThm23gyC3GJiXk= Subject key identifier: C3:F6:C8:A7:95:07:B8:AD:93:D3:65:64:75:78:03:A9:4B:C1:8A:5A Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 6D441511038880AC46DE4CDB7FFEEEC8156B4929 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa Signing time: Wed 07 Feb 2024 03:24:00 +0000 ROA not before: Wed 07 Feb 2024 03:19:00 +0000 ROA not after: Wed 05 Feb 2025 03:24:00 +0000 asID: 133798 IP address blocks: 203.128.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:44:15:11:03:88:80:ac:46:de:4c:db:7f:fe:ee:c8:15:6b:49:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Feb 7 03:19:00 2024 GMT Not After : Feb 5 03:24:00 2025 GMT Subject: CN=C3F6C8A79507B8AD93D36564757803A94BC18A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:1d:a8:6d:18:2f:d2:29:9a:b7:4f:8b:25: 52:4e:03:67:21:7b:c6:08:8b:76:fd:45:ea:16:ce: 79:d7:cc:0c:4a:82:c7:93:a9:18:12:36:a5:d7:c3: ab:62:fd:7e:e7:1b:5b:4f:78:76:2f:18:87:66:af: b8:ff:23:87:80:79:49:6d:09:4b:f5:05:a7:70:aa: d3:dc:65:4b:57:4d:7e:3f:59:f3:c0:22:1f:f6:b2: 25:6e:53:8b:34:c2:3a:b1:de:a4:a5:58:13:da:e8: 83:ac:36:ed:af:51:c5:27:b5:e2:8c:97:8f:73:db: 09:66:ab:3e:ee:ed:bf:d7:6c:9e:e7:10:d1:45:ad: 37:c8:32:54:2c:02:ba:d8:e9:c2:d7:9a:52:ca:b3: 49:e2:b1:6d:30:54:ee:89:cf:81:cd:92:21:18:98: dd:24:a0:7d:ec:25:40:fd:94:e3:ca:06:c7:33:5f: 27:4d:de:82:b2:b4:f8:0c:33:53:8b:3c:9e:a8:ee: b3:fc:6a:17:84:b6:15:11:8b:ed:be:c3:70:ce:f1: f8:67:e7:90:51:dc:fb:18:7e:77:3f:98:c1:36:9a: a3:47:c5:ef:8e:e1:a5:a4:61:2c:ff:7a:b1:10:1e: 25:9a:8b:60:2e:03:ef:77:7a:d2:95:e8:8d:4d:de: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:C8:A7:95:07:B8:AD:93:D3:65:64:75:78:03:A9:4B:C1:8A:5A X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.128.248.0/22 Signature Algorithm: sha256WithRSAEncryption 36:f6:54:6d:74:fa:f2:3d:62:84:88:86:39:61:e7:5a:ef:01: 0b:9c:ac:cb:33:c6:ec:be:32:33:54:ec:54:89:71:6d:f5:6e: 03:f7:ce:e2:3b:c1:c6:e1:9d:be:4f:60:74:67:04:af:82:88: f5:dd:50:d8:9a:74:40:38:f2:5e:99:0f:75:da:3d:cf:e2:b6: b6:d7:76:7c:ef:96:fb:17:16:4d:0e:d5:49:f7:8d:8e:6c:67: ce:ee:10:27:86:9b:ae:8a:e9:1f:ca:7d:ba:7d:86:52:63:ec: ee:1e:41:03:61:ae:2c:4a:c3:62:ec:ea:04:93:b2:09:c2:f1: e6:72:4d:59:96:e4:35:29:01:94:67:9e:9b:b2:b3:60:14:11: 47:6f:6b:10:99:42:39:c8:90:d9:9f:2e:d6:a7:0e:c5:48:db: fb:8d:4d:6e:9c:8d:80:0a:09:4b:77:2a:1e:66:10:7a:e3:79: 5b:3d:14:b3:33:26:69:3f:36:34:2e:e9:61:72:44:37:f1:58: e8:9d:99:50:34:73:1f:14:ed:4d:8f:7d:c8:51:87:a0:59:92: 0e:af:2e:9f:53:ed:d8:ab:83:e3:54:bd:f2:43:ab:6b:35:d0: 55:a5:a2:6a:7d:02:98:34:b7:04:88:73:d3:59:1e:c0:d5:57: a7:25:59:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbUQVEQOIgKxG3kzbf/7uyBVrSSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNDAyMDcwMzE5MDBaFw0yNTAyMDUwMzI0MDBaMDMxMTAvBgNV BAMTKEMzRjZDOEE3OTUwN0I4QUQ5M0QzNjU2NDc1NzgwM0E5NEJDMThBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaB2obRgv0imat0+LJVJOA2ch e8YIi3b9ReoWznnXzAxKgseTqRgSNqXXw6ti/X7nG1tPeHYvGIdmr7j/I4eAeUlt CUv1BadwqtPcZUtXTX4/WfPAIh/2siVuU4s0wjqx3qSlWBPa6IOsNu2vUcUnteKM l49z2wlmqz7u7b/XbJ7nENFFrTfIMlQsArrY6cLXmlLKs0nisW0wVO6Jz4HNkiEY mN0koH3sJUD9lOPKBsczXydN3oKytPgMM1OLPJ6o7rP8aheEthURi+2+w3DO8fhn 55BR3PsYfnc/mME2mqNHxe+O4aWkYSz/erEQHiWai2AuA+93etKV6I1N3rtVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUw/bIp5UHuK2T02VkdXgDqUvBilowHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLgPgwDQYJ KoZIhvcNAQELBQADggEBADb2VG10+vI9YoSIhjlh51rvAQucrMszxuy+MjNU7FSJ cW31bgP3zuI7wcbhnb5PYHRnBK+CiPXdUNiadEA48l6ZD3XaPc/itrbXdnzvlvsX Fk0O1Un3jY5sZ87uECeGm66K6R/Kfbp9hlJj7O4eQQNhrixKw2Ls6gSTsgnC8eZy TVmW5DUpAZRnnpuys2AUEUdvaxCZQjnIkNmfLtanDsVI2/uNTW6cjYAKCUt3Kh5m EHrjeVs9FLMzJmk/NjQu6WFyRDfxWOidmVA0cx8U7U2PfchRh6BZkg6vLp9T7dir g+NUvfJDq2s10FWlomp9Apg0twSIc9NZHsDVV6clWRY= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org